Principal Security Architect

Job Title: Principal Security Architect

Location: Hybrid either Corsham or Abby Wood (Bristol) (2-3 days per week)

Employment Type: Permanent

Salary: £90,000 - £100,000

Start Date: Immediate

Industry: UK Government & Defence

We’re working with a leading UK security consultancy trusted by government and defence to deliver some of the UK’s most sensitive programmes. They’re looking for a Principal Security Architect (SFIA Level 6) to lead Secure by Design on brand-new application development across MOD programmes.

This is a senior, hands-on role where you’ll set the security direction from day one. You’ll shape how new defence applications are designed, built and accredited, and be the trusted security authority for delivery teams, programme leads and MOD assurance bodies. If you want real ownership of security architecture on nationally significant work, this is it.

Principal Security Architect – Key Responsibilities

• Lead end-to-end security architecture for new applications and services, from concept and design through build, accreditation and into service
• Embed MOD Secure by Design (JSP 440 / JSP 604 / Def Stan 05-138) into delivery teams and the development lifecycle
• Own threat modelling, cyber risk assessment and security design artefacts (HLDs, LLDs, security patterns and risk treatment plans)
• Define security requirements up front and make sure they’re built in, not bolted on
• Design identity, access, encryption and Zero Trust approaches for new applications, APIs and cloud/hybrid platforms
• Build security into CI/CD pipelines, containers and infrastructure-as-code alongside developers and platform engineers
• Support the accreditation journey: Cyber Risk Profiles, security cases and evidence for the Risk Owner
• Be the senior security voice to programme leads, design authorities and assurance bodies
• Mentor and develop other consultants and architects across the practice

Principal Security Architect – Key Skills Required

• Sole British passport holder; live and active SC clearance is essential (DV a bonus)
• Senior / principal Security Architect experience (SFIA 6 or equivalent)
• Proven experience on MOD / Defence projects – essential
• Strong secure application development / DevSecOps background: secure SDLC, pipeline security, code and container scanning
• Hands-on threat modelling (e.g. STRIDE, MITRE ATT&CK) and cyber risk assessment
• Solid cloud and hybrid security knowledge across Azure and/or AWS, including IAM, PKI and encryption
• Experience taking designs through Technical Design Authorities and architecture review boards
• A great communicator, with proven stakeholder management experience up to senior level

Principal Security Architect – Desirable

• CISSP, CCSP, CISSP-ISSAP or UK Cyber Security Council Chartered status
• TOGAF, SABSA or MODAF / NAF
• Exposure to cross-domain solutions or classified environments

Please apply now if this role is of interest.